Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Secret security weapon

Vendors turn to OPSWAT to better their products.
By Ellen Messmer , Network World , 04/10/2006

There are dozens of brands of anti-virus, anti-spyware, desktop firewall and VPN products, and Benny Czarny has made it his business to know them all inside and out.

Eight other engineers at OPSWAT, the San Francisco company that Czarny founded in 2002, do the same. Why? So that other IT companies, now gung-ho on the concept of checking for anti-virus, anti-spyware, VPN or patch updates before allowing network access, can spare themselves the time-consuming task of keeping up with all the security software brands out there.

Vendors such as Cisco, F5 Networks, Symantec and Juniper Networks license the OPSWAT code that checks for more than 400 versions of security software from more than 35 vendors. They embed the code, a software development kit (SDK), into their network-access control products.

This has made OPSWAT (which informally stands for Omni-Platform Security with Access Technologies), a security vendor to security vendors, supporting methods of network-access control ranging from Microsoft's Network Access Protection to Cisco's Network Admission Control.

The anti-virus answer

"What is anti-virus, is the question," says Czarny, a 34-year-old computer science graduate of Israel's Technion, Israeli Institute of Technology, who confesses to being a "bit nerdy" in his fascination with software code, which he started programming when he was 11 years old. "Anti-virus is configuring a system to scan and update."

Every anti-virus vendor, Czarny says, accomplishes this a different way - sometimes even differently in separate versions of the same product.

The API is supposed to be the direct path into how products work, so OPSWAT licenses every virus package it can find and seeks business relationships with as many vendors as it can to obtain the APIs.

But that approach doesn't always work.

"Sometimes vendors are open, sometimes they hide things," Czarny says. And he adds about the much-desired APIs: "Sometimes they just don't have them."

When OPSWAT meets those kinds of barriers, its software engineers in the United States and Israel have to dive into the security code using their own methods to be able to add the anti-virus software to the OPSWAT framework, which is basically an API for all other APIs.

Part of OPSWAT's mission is to uncover new anti-virus and anti-spyware companies. While McAfee, Symantec and Trend Micro have practically become household names in the United States, there are younger firms - such as Beijing Rising Technology, KingSoft and Jiangmin in China, and MicroWorld in India - that OPSWAT also works with.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (1)
Login
Forgot your account info?

changing usb programmingBy anonymous on September 2, 2008, 2:15 pmis it possible to change the program info on a usb stick.

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.